Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa
File: 9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa (raw, json)
Hash identifier: VlSp272I0RQLIb0DbcKk4+aA52yEGnNDHUBNw7N4tBA=
Subject key identifier: 05:37:46:49:C1:88:96:88:EE:BF:4C:FD:40:D2:BA:14:7F:44:73:5D
Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Certificate serial: 010D0C9F43285847E094E5B47E343EA303965680
Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa
Signing time: Thu 14 Nov 2024 14:00:40 +0000
ROA not before: Thu 14 Nov 2024 14:00:40 +0000
ROA not after: Wed 12 Feb 2025 14:00:40 +0000
asID: 54113
IP address blocks: 157.5.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:47:e0:94:e5:b4:7e:34:3e:a3:03:96:56:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1
Validity
Not Before: Nov 14 14:00:40 2024 GMT
Not After : Feb 12 14:00:40 2025 GMT
Subject: CN=5bff433b-7cfb-4a8a-93f0-c7e2b96a2b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:fe:9b:0d:de:c5:e4:a7:3f:eb:51:68:4b:
b7:6d:9e:a9:c4:c0:a2:d0:14:01:40:6b:8b:49:36:
5a:3a:be:9d:48:02:e3:d7:45:55:b5:74:fe:74:d4:
17:8f:62:0a:05:b3:3c:42:49:b4:5a:45:dc:63:8f:
36:06:bd:64:53:e6:4c:e5:34:7a:ae:d5:0b:1a:85:
47:ed:2a:7e:c9:81:0f:1b:3b:46:5d:c5:95:87:3b:
41:f5:75:44:c5:3c:1b:97:a3:99:d7:4d:20:14:7a:
6d:d9:c4:a0:02:d8:d7:de:c4:a6:15:a2:28:a9:06:
a4:c7:7f:99:93:14:99:b4:05:4b:1a:cc:06:11:9b:
5d:5d:9e:1d:14:b4:86:cb:ea:be:1c:e4:30:01:c4:
e9:53:a1:30:d3:1a:50:ae:dc:67:ed:b7:ac:a7:c3:
6b:3a:b6:52:5b:3c:3c:14:f5:12:9d:6f:92:80:54:
71:6b:f9:1a:20:30:f1:f8:da:0c:d1:49:b3:6b:2b:
18:bd:6a:e5:b9:0f:b1:08:b9:64:bd:2a:3b:58:31:
f3:89:34:dc:90:66:b1:d2:a9:72:64:01:2e:36:39:
b4:66:c2:94:27:49:5e:1f:ff:c4:a8:48:6f:2e:34:
e7:64:aa:6a:5a:61:b6:43:da:81:3a:b1:b5:cd:3a:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:37:46:49:C1:88:96:88:EE:BF:4C:FD:40:D2:BA:14:7F:44:73:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/9ed666d9-d6d7-3102-80ea-a4f643ad84d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl
X509v3 Authority Key Identifier:
keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer
sbgp-ipAddrBlock: critical
IPv4:
157.5.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:7d:f1:0c:59:b8:16:a8:01:12:5c:49:cb:65:ee:8f:c4:5a:
6e:f9:c1:1b:f5:6a:b1:19:74:b9:e7:36:d0:a3:7c:dd:ac:41:
20:27:b7:b6:9d:71:d2:5b:4e:f1:a4:dd:1f:72:e6:40:2d:3a:
64:1b:b6:8d:3b:cc:c1:2a:91:1c:cf:6f:be:c0:76:35:fd:7d:
cd:22:67:de:41:4a:b8:53:f7:21:49:69:f2:dd:12:ea:70:6a:
30:dd:06:68:bb:d8:21:a8:00:46:56:a9:0e:c0:25:a2:5b:21:
2c:9c:47:74:fc:d8:83:c1:09:7b:1d:2c:c2:02:f5:df:45:e9:
00:07:43:14:09:ff:92:56:f1:a8:39:23:28:19:be:73:f5:33:
b0:bf:ec:b5:12:f3:05:1a:6f:fe:e1:d5:ce:01:c2:96:c9:d0:
09:33:ec:09:0e:3f:4e:65:2a:d7:bd:49:31:17:1c:78:f3:cf:
46:7b:58:f2:d1:99:7c:53:84:50:9f:f6:97:13:83:86:07:b4:
85:f6:d2:56:64:58:bf:fe:42:58:f2:04:54:45:51:ba:81:60:
ee:76:6e:aa:43:c7:c5:af:90:c4:a4:89:a8:3c:96:a0:95:5d:
96:bd:d2:fb:22:77:c5:65:aa:ea:d1:fe:5a:ad:d1:13:d7:2f:
b3:24:7f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:22:41 2025 by rpki-client